hardened malloc. networking + firewall. json based config.

2026-02-08 12:36:23 -07:00
parent cdb972579a
commit 2770dfc964
46 changed files with 1443 additions and 138 deletions
--- a/config/settings/opensnitch/default-config.json
+++ b/config/settings/opensnitch/default-config.json
@@ -0,0 +1,37 @@
+{
+    "Server": {
+        "Address": "unix:///tmp/osui.sock",
+        "LogFile": "/var/log/opensnitchd.log",
+        "Authentication": {
+            "Type": "simple",
+            "TLSOptions": {
+                "CACert": "",
+                "ServerCert": "",
+                "ClientCert": "",
+                "ClientKey": "",
+                "SkipVerify": false,
+                "ClientAuthType": "no-client-cert"
+            }
+        }
+    },
+    "DefaultAction": "deny",
+    "DefaultDuration": "once",
+    "InterceptUnknown": false,
+    "ProcMonitorMethod": "ebpf",
+    "LogLevel": 2,
+    "LogUTC": true,
+    "LogMicro": false,
+    "Firewall": "nftables",
+    "Rules": {
+        "Path": "/etc/opensnitchd/rules/"
+    },
+    "Stats": {
+        "MaxEvents": 150,
+        "MaxStats": 25,
+        "Workers": 6
+    },
+    "Internal": {
+        "GCPercent": 100,
+        "FlushConnsOnStart": false
+    }
+}